AariaSec Field Notes — AI Agent Incident Intelligence

AWR Quick Reference

AWR-001

Prompt Injection Attempt

Sudden tool-call spike, unusual token ratios, new egress destinations appearing simultaneously.
AWR-006

Agent Impersonation

Behavioral fingerprint deviates sharply from baseline — possible agent hijacking. Mahalanobis distance exceeds threshold.
AWR-100

Quality Degradation (Compound)

Compound response-quality degradation across session. Fires when coherence decline persists beyond transient noise.
AWR-110

Attack Chain Detected

Multi-step attack chain correlated across session events. Compound behavioral signal.
AWR-111

Injection → Exfil Chain

Prompt injection followed by new tool call and egress — confirmed multi-step exfiltration chain.
AWR-112

Credential Harvest Chain

PII/credential detection followed by egress to new host — credential exfiltration chain.
AWR-113

MCP Privilege Escalation

MCP call → authority exceeded → unauthorized tool call. Privilege escalation chain.
AWR-115

Multi-Agent Cascade

Attack pattern from one agent appears in another within the correlation window.

Full AWR Rule Library

226 of 289 rules evaluate against the telemetry the sensor produces today. The other 63 are authored ahead of the Phase-2 OS-layer signals they need, and labelled as such in the library. None are advertised-but-unable-to-fire — that is zero, and you can reproduce it yourself with scripts/audit_producer_coverage.py. All 289 ship in the free download.

Download free →

No account, no commitment. Nothing leaves your machine.

This page summarizes public reporting and research. AariaSec mappings are analytical references, not claims about any specific deployment.